This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/044350-8cc9-486d-87c9-572c4e129d32/1/vJldFVAngKzfe25qGGXttaDn3Es.mft File: vJldFVAngKzfe25qGGXttaDn3Es.mft (raw, json) Hash identifier: sTaOiG6xVeNCfop0cTjE4U3u+6+/pLV3Vu3zhH7aTrE= Subject key identifier: C7:D6:50:3C:8C:83:9D:A0:FE:69:DD:03:85:5E:83:B6:7D:7C:55:3A Authority key identifier: BC:99:5D:15:50:27:80:AC:DF:7B:6E:6A:18:65:ED:B5:A0:E7:DC:4B Certificate issuer: /CN=bc995d15502780acdf7b6e6a1865edb5a0e7dc4b Certificate serial: 019B2F67C79104989F12CFD63823A1AB5CE3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJldFVAngKzfe25qGGXttaDn3Es.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/044350-8cc9-486d-87c9-572c4e129d32/1/vJldFVAngKzfe25qGGXttaDn3Es.mft Manifest number: 0536 Signing time: Thu 18 Dec 2025 03:01:28 +0000 Manifest this update: Thu 18 Dec 2025 03:01:28 +0000 Manifest next update: Fri 19 Dec 2025 03:01:28 +0000 Files and hashes: 1: vJldFVAngKzfe25qGGXttaDn3Es.crl (hash: thNMQVizU6YZOsMtn7TVTlL9uV1IuStzL5aVBtjqkAM=) 2: ylPOOnSs52DARSEahPLXBl4_KnA.roa (hash: lVDEfOqJ+hS5o1tAWzlyu4ZG8E1RuFvF7CBIziXEhTM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/044350-8cc9-486d-87c9-572c4e129d32/1/vJldFVAngKzfe25qGGXttaDn3Es.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/044350-8cc9-486d-87c9-572c4e129d32/1/vJldFVAngKzfe25qGGXttaDn3Es.mft rsync://rpki.ripe.net/repository/DEFAULT/vJldFVAngKzfe25qGGXttaDn3Es.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:67:c7:91:04:98:9f:12:cf:d6:38:23:a1:ab:5c:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc995d15502780acdf7b6e6a1865edb5a0e7dc4b Validity Not Before: Dec 18 03:01:28 2025 GMT Not After : Dec 19 03:01:28 2025 GMT Subject: CN=c7d6503c8c839da0fe69dd03855e83b67d7c553a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d2:83:fd:21:c3:a8:0d:53:bd:4f:a8:92:78: 99:c3:64:04:82:33:be:92:2f:8a:d5:33:fb:2f:c4: a6:4b:ae:da:36:67:8e:0d:ea:a0:e9:44:37:b9:12: a7:f3:e7:7c:f8:e2:d1:71:f3:44:74:c1:57:d8:81: 8e:04:f7:f3:49:df:08:99:cc:39:77:7f:ad:c0:9a: f1:b4:62:78:36:04:98:85:52:75:2c:4d:91:84:59: df:40:b7:84:f3:79:7c:ff:24:66:5d:3c:d2:e0:b8: 37:55:e5:06:ca:4d:4f:b7:5c:23:57:7e:95:96:28: cf:7b:06:a2:e0:92:0d:c4:ff:ad:12:f3:ff:64:13: de:95:d1:4f:bd:05:63:dc:eb:d8:5e:80:40:51:54: 37:9d:46:fe:19:fe:a0:e8:2c:2e:37:f7:8e:dc:65: 96:45:13:17:95:bd:1e:52:a6:74:94:0f:7d:a1:2d: 6f:6a:52:ee:3c:dc:a0:c0:05:7d:27:36:56:aa:e0: ac:9e:92:c7:07:32:bb:0a:ba:e8:f0:ae:03:3a:24: 6f:61:51:34:37:f3:4d:a3:65:5b:47:30:03:66:a1: d8:9e:e9:d7:a3:62:fc:ef:4e:bc:80:64:a7:11:be: 2f:7e:bf:b5:e5:49:cb:3b:18:3a:1c:74:dc:91:1a: 32:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:D6:50:3C:8C:83:9D:A0:FE:69:DD:03:85:5E:83:B6:7D:7C:55:3A X509v3 Authority Key Identifier: keyid:BC:99:5D:15:50:27:80:AC:DF:7B:6E:6A:18:65:ED:B5:A0:E7:DC:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJldFVAngKzfe25qGGXttaDn3Es.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/044350-8cc9-486d-87c9-572c4e129d32/1/vJldFVAngKzfe25qGGXttaDn3Es.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/044350-8cc9-486d-87c9-572c4e129d32/1/vJldFVAngKzfe25qGGXttaDn3Es.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:66:28:6e:0c:85:81:74:ff:64:81:eb:8f:8b:00:b6:43:0d: 17:e3:1b:5d:97:dd:66:be:54:ac:ef:59:6c:b7:3f:62:ef:b6: 60:0a:47:d0:52:3a:1f:66:6c:b9:96:2a:8f:93:45:0b:19:ca: 70:e6:4c:e4:10:1c:86:54:0b:2e:c5:7d:1c:d4:9c:35:1a:23: 27:41:f2:75:31:2a:91:8a:c2:a1:31:11:71:d3:80:a8:c9:6f: e4:3d:21:f0:8f:30:e2:64:b3:83:03:28:28:d6:17:bf:45:2d: 53:7a:2a:4c:ab:2d:0b:fd:ec:53:06:88:af:8f:9f:58:36:37: 9f:53:da:24:4f:91:78:d8:8b:38:93:bc:53:4b:db:9d:e4:58: 80:cc:0b:96:4a:f8:b8:0c:bf:ef:98:08:f9:48:90:03:db:b4: 7b:cf:53:43:47:56:0c:c1:57:e7:6f:24:2a:6b:bf:c3:e3:bc: a8:30:86:60:3a:f7:3d:f3:c5:ab:29:27:51:6c:46:05:47:2d: 6e:68:65:c8:23:2f:84:ea:38:1d:eb:13:db:a3:4d:cc:55:d2: 76:bf:16:89:80:b8:2d:4c:f3:70:3b:46:30:53:63:34:1a:2c: c4:45:16:5e:df:fa:8d:38:2c:52:d7:99:b6:03:66:71:5c:ce: 8a:13:5d:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvZ8eRBJifEs/WOCOhq1zjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjOTk1ZDE1NTAyNzgwYWNkZjdiNmU2YTE4NjVlZGI1YTBl N2RjNGIwHhcNMjUxMjE4MDMwMTI4WhcNMjUxMjE5MDMwMTI4WjAzMTEwLwYDVQQD EyhjN2Q2NTAzYzhjODM5ZGEwZmU2OWRkMDM4NTVlODNiNjdkN2M1NTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtKD/SHDqA1TvU+okniZw2QEgjO+ ki+K1TP7L8SmS67aNmeODeqg6UQ3uRKn8+d8+OLRcfNEdMFX2IGOBPfzSd8Imcw5 d3+twJrxtGJ4NgSYhVJ1LE2RhFnfQLeE83l8/yRmXTzS4Lg3VeUGyk1Pt1wjV36V lijPewai4JINxP+tEvP/ZBPeldFPvQVj3OvYXoBAUVQ3nUb+Gf6g6CwuN/eO3GWW RRMXlb0eUqZ0lA99oS1valLuPNygwAV9JzZWquCsnpLHBzK7Crro8K4DOiRvYVE0 N/NNo2VbRzADZqHYnunXo2L87068gGSnEb4vfr+15UnLOxg6HHTckRoyMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMfWUDyMg52g/mndA4Veg7Z9fFU6MB8GA1UdIwQY MBaAFLyZXRVQJ4Cs33tuahhl7bWg59xLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkpsZEZWQW5nS3pmZTI1cUdHWHR0YURuM0VzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS8wNDQzNTAtOGNjOS00ODZkLTg3Yzkt NTcyYzRlMTI5ZDMyLzEvdkpsZEZWQW5nS3pmZTI1cUdHWHR0YURuM0VzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS8wNDQzNTAtOGNjOS00ODZkLTg3YzktNTcyYzRlMTI5ZDMy LzEvdkpsZEZWQW5nS3pmZTI1cUdHWHR0YURuM0VzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo2YobgyF gXT/ZIHrj4sAtkMNF+MbXZfdZr5UrO9ZbLc/Yu+2YApH0FI6H2ZsuZYqj5NFCxnK cOZM5BAchlQLLsV9HNScNRojJ0HydTEqkYrCoTERcdOAqMlv5D0h8I8w4mSzgwMo KNYXv0UtU3oqTKstC/3sUwaIr4+fWDY3n1PaJE+ReNiLOJO8U0vbneRYgMwLlkr4 uAy/75gI+UiQA9u0e89TQ0dWDMFX528kKmu/w+O8qDCGYDr3PfPFqyknUWxGBUct bmhlyCMvhOo4HesT26NNzFXSdr8WiYC4LUzzcDtGMFNjNBosxEUWXt/6jTgsUteZ tgNmcVzOihNdQg== -----END CERTIFICATE-----Generated at Thu Dec 18 04:21:06 2025 by rpki-client